PurpleI2P
/
i2pd
mirror of https://github.com/PurpleI2P/i2pd.git
1
0
Fork 0
Code Issues Releases Activity
Browse Source

Merge SOCKS4a and SOCKS5 request parsers, add stub support for SOCKS4 and IPv4 and IPv6 addresses on SOCKS5

pull/134/head
Francisco Blas (klondike) Izquierdo Riera 10 years ago
parent
46b16237b6
commit
225aa7fa6a
2 changed files with 160 additions and 175 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 280
      SOCKS.cpp
  2. 55
      SOCKS.h

280
SOCKS.cpp
Unescape View File

@ -122,12 +122,10 @@ namespace proxy
switch (m_state) { switch (m_state) {
case GET_VERSION: case GET_VERSION:
return HandleVersion(sock_buff); return HandleVersion(sock_buff);
case SOCKS4A: case SOCKS5_AUTHNEGO:
return HandleSOCKS4A(sock_buff,len); return HandleSOCKS5AuthNego(sock_buff,len);
case SOCKS5_S1: case SOCKS_REQUEST:
return HandleSOCKS5Step1(sock_buff,len); return HandleSOCKSRequest(sock_buff,len);
case SOCKS5_S3:
return HandleSOCKS5Step3(sock_buff,len);
default: default:
LogPrint(eLogError,"--- SOCKS state?? ", m_state); LogPrint(eLogError,"--- SOCKS state?? ", m_state);
Terminate(); Terminate();
@ -138,98 +136,24 @@ namespace proxy
std::size_t SOCKSHandler::HandleVersion(uint8_t *sock_buff) std::size_t SOCKSHandler::HandleVersion(uint8_t *sock_buff)
{ {
switch (*sock_buff) { switch (*sock_buff) {
case 4: case SOCKS4:
m_state = SOCKS4A; // Switch to the 4a handler m_state = SOCKS_REQUEST; // Switch to the 4 handler
m_pstate = GET4A_COMMAND; //Initialize the parser at the right position m_pstate = GET_COMMAND; //Initialize the parser at the right position
m_socksv = SOCKS4; break;
return 1; case SOCKS5:
case 5: m_state = SOCKS5_AUTHNEGO; // Switch to the 5 handler
m_state = SOCKS5_S1; // Switch to the 4a handler
m_pstate = GET5_AUTHNUM; //Initialize the parser at the right position m_pstate = GET5_AUTHNUM; //Initialize the parser at the right position
m_socksv = SOCKS5; break;
return 1;
default: default:
LogPrint(eLogError,"--- SOCKS rejected invalid version", ((int)*sock_buff)); LogPrint(eLogError,"--- SOCKS rejected invalid version: ", ((int)*sock_buff));
Terminate(); Terminate();
return 0; return 0;
} }
m_socksv = (SOCKSHandler::socksVersions) *sock_buff;
return 1;
} }
std::size_t SOCKSHandler::HandleSOCKS4A(uint8_t *sock_buff, std::size_t len) std::size_t SOCKSHandler::HandleSOCKS5AuthNego(uint8_t *sock_buff, std::size_t len)
{
std::size_t rv = 0;
while (len > 0) {
rv++;
switch (m_pstate)
{
case GET4A_COMMAND:
if ( *sock_buff != CMD_CONNECT ) {
//TODO: we need to support binds and other shit!
LogPrint(eLogError,"--- SOCKS4a unsupported command", ((int)*sock_buff));
SocksRequestFailed();
return 0;
}
m_pstate = GET4A_PORT1;
break;
case GET4A_PORT1:
m_port = ((uint16_t)*sock_buff) << 8;
m_pstate = GET4A_PORT2;
break;
case GET4A_PORT2:
m_port |= ((uint16_t)*sock_buff);
m_pstate = GET4A_IP1;
break;
case GET4A_IP1:
m_ip = ((uint32_t)*sock_buff) << 24;
m_pstate = GET4A_IP2;
break;
case GET4A_IP2:
m_ip |= ((uint32_t)*sock_buff) << 16;
m_pstate = GET4A_IP3;
break;
case GET4A_IP3:
m_ip |= ((uint32_t)*sock_buff) << 8;
m_pstate = GET4A_IP4;
break;
case GET4A_IP4:
m_ip |= ((uint32_t)*sock_buff);
m_pstate = GET4A_IDENT;
if( m_ip == 0 || m_ip > 255 ) {
LogPrint(eLogError,"--- SOCKS4a rejected because it's actually SOCKS4");
SocksRequestFailed();
return 0;
}
break;
case GET4A_IDENT:
if (!*sock_buff)
m_pstate = GET4A_HOST;
break;
case GET4A_HOST:
if (!*sock_buff) {
m_pstate = DONE;
m_state = READY;
m_need_more = false;
return rv;
}
if (m_destination.size() > max_socks_hostname_size) {
LogPrint(eLogError,"--- SOCKS4a destination is too large ");
SocksRequestFailed();
return 0;
}
m_destination.push_back(*sock_buff);
break;
default:
LogPrint(eLogError,"--- SOCKS4a parse state?? ", m_pstate);
Terminate();
return 0;
}
sock_buff++;
len--;
}
return rv;
}
std::size_t SOCKSHandler::HandleSOCKS5Step1(uint8_t *sock_buff, std::size_t len)
{ {
std::size_t rv = 0; std::size_t rv = 0;
while (len > 0) { while (len > 0) {
@ -252,7 +176,7 @@ namespace proxy
return 0; return 0;
} }
m_pstate = GET5_REQUESTV; m_pstate = GET5_REQUESTV;
m_state = SOCKS5_S3; m_state = SOCKS_REQUEST;
m_need_more = false; m_need_more = false;
Socks5ChooseAuth(); Socks5ChooseAuth();
return rv; return rv;
@ -269,36 +193,118 @@ namespace proxy
return rv; return rv;
} }
//TODO this may be merged with the SOCKS4a code bool SOCKSHandler::ValidateSOCKSRequest() {
std::size_t SOCKSHandler::HandleSOCKS5Step3(uint8_t *sock_buff, std::size_t len) if ( m_cmd != CMD_CONNECT ) {
//TODO: we need to support binds and other shit!
LogPrint(eLogError,"--- SOCKS unsupported command: ", m_cmd);
m_error = SOCKS5_CMD_UNSUP;
SocksRequestFailed();
return false;
}
//TODO: we may want to support other address types!
if ( m_addrtype != ADDR_DNS ) {
switch (m_socksv) {
case SOCKS5:
LogPrint(eLogError,"--- SOCKS5 unsupported address type: ", m_addrtype);
m_error = SOCKS5_ADDR_UNSUP;
break;
case SOCKS4:
LogPrint(eLogError,"--- SOCKS4a rejected because it's actually SOCKS4");
break;
}
SocksRequestFailed();
return false;
}
//TODO: we may want to support other domains
if(m_addrtype == ADDR_DNS && m_destination.find(".i2p") == std::string::npos) {
LogPrint(eLogError,"--- SOCKS invalid hostname: ", m_destination);
m_error = SOCKS5_ADDR_UNSUP;
SocksRequestFailed();
return false;
}
return true;
}
std::size_t SOCKSHandler::HandleSOCKSRequest(uint8_t *sock_buff, std::size_t len)
{ {
std::size_t rv = 0; std::size_t rv = 0;
while (len > 0) { while (len > 0) {
rv++; rv++;
switch (m_pstate) switch (m_pstate)
{ {
case GET5_REQUESTV: case GET_COMMAND:
if (*sock_buff != SOCKS5) { switch (*sock_buff) {
LogPrint(eLogError,"--- SOCKS rejected unknown request version", ((int)*sock_buff)); case CMD_CONNECT:
m_error = SOCKS5_GEN_FAIL; case CMD_BIND:
break;
case CMD_UDP:
if (m_socksv == SOCKS5) break;
default:
LogPrint(eLogError,"--- SOCKS invalid command: ", ((int)*sock_buff));
m_error = SOCKS5_GEN_FAIL;
SocksRequestFailed();
return 0;
}
m_cmd = (SOCKSHandler::cmdTypes)*sock_buff;
switch (m_socksv) {
case SOCKS5: m_pstate = GET5_GETRSV; break;
case SOCKS4: m_pstate = GET_PORT; m_addrleft = 2; break;
}
break;
case GET_PORT:
m_port = (m_port << 8)|((uint16_t)*sock_buff);
m_addrleft--;
if (m_addrleft == 0) {
switch (m_socksv) {
case SOCKS5: m_pstate = DONE; break;
case SOCKS4: m_pstate = GET_IPV4; m_addrleft = 4; break;
}
}
break;
case GET_IPV4:
m_ip = (m_ip << 8)|((uint32_t)*sock_buff);
m_addrleft--;
if (m_addrleft == 0) {
switch (m_socksv) {
case SOCKS5: m_pstate = GET_PORT; m_addrleft = 2; break;
case SOCKS4: m_pstate = GET4_IDENT; break;
}
}
break;
case GET4_IDENT:
if (!*sock_buff) {
if( m_ip == 0 || m_ip > 255 ) {
m_addrtype = ADDR_IPV4;
m_pstate = DONE;
} else {
m_addrtype = ADDR_DNS;
m_pstate = GET4A_HOST;
}
}
break;
case GET4A_HOST:
if (!*sock_buff) {
m_pstate = DONE;
break;
}
if (m_destination.size() > max_socks_hostname_size) {
LogPrint(eLogError,"--- SOCKS4a destination is too large");
SocksRequestFailed(); SocksRequestFailed();
return 0; return 0;
} }
m_pstate = GET5_COMMAND; m_destination.push_back(*sock_buff);
break; break;
case GET5_COMMAND: case GET5_REQUESTV:
if ( *sock_buff != CMD_CONNECT ) { if (*sock_buff != SOCKS5) {
//TODO: we need to support binds and other shit! LogPrint(eLogError,"--- SOCKS5 rejected unknown request version: ", ((int)*sock_buff));
LogPrint(eLogError,"--- SOCKS5 unsupported command", ((int)*sock_buff)); m_error = SOCKS5_GEN_FAIL;
m_error = SOCKS5_CMD_UNSUP;
SocksRequestFailed(); SocksRequestFailed();
return 0; return 0;
} }
m_pstate = GET5_GETRSV; m_pstate = GET_COMMAND;
break; break;
case GET5_GETRSV: case GET5_GETRSV:
if ( *sock_buff != 0 ) { if ( *sock_buff != 0 ) {
LogPrint(eLogError,"--- SOCKS5 unknown reserved field", ((int)*sock_buff)); LogPrint(eLogError,"--- SOCKS5 unknown reserved field: ", ((int)*sock_buff));
m_error = SOCKS5_GEN_FAIL; m_error = SOCKS5_GEN_FAIL;
SocksRequestFailed(); SocksRequestFailed();
return 0; return 0;
@ -306,15 +312,25 @@ namespace proxy
m_pstate = GET5_GETADDRTYPE; m_pstate = GET5_GETADDRTYPE;
break; break;
case GET5_GETADDRTYPE: case GET5_GETADDRTYPE:
if ( *sock_buff != ADDR_DNS ) { switch (*sock_buff) {
//TODO: we may want to support other address types! case ADDR_IPV4: m_pstate = GET_IPV4; m_addrleft = 4; break;
LogPrint(eLogError,"--- SOCKS5 unsupported address type", ((int)*sock_buff)); case ADDR_IPV6: m_pstate = GET5_IPV6; m_addrleft = 16; break;
m_error = SOCKS5_ADDR_UNSUP; case ADDR_DNS : m_pstate = GET5_HOST_SIZE; break;
SocksRequestFailed(); default:
return 0; LogPrint(eLogError,"--- SOCKS5 unknown address type: ", ((int)*sock_buff));
m_error = SOCKS5_GEN_FAIL;
SocksRequestFailed();
return 0;
}
m_addrtype = (SOCKSHandler::addrTypes)*sock_buff;
break;
case GET5_IPV6:
m_ipv6[16-m_addrleft] = *sock_buff;
m_addrleft--;
if (m_addrleft == 0) {
m_pstate = GET_PORT;
m_addrleft = 2;
} }
m_addrtype = ADDR_DNS;
m_pstate = GET5_HOST_SIZE;
break; break;
case GET5_HOST_SIZE: case GET5_HOST_SIZE:
m_addrleft = *sock_buff; m_addrleft = *sock_buff;
@ -323,25 +339,21 @@ namespace proxy
case GET5_HOST: case GET5_HOST:
m_destination.push_back(*sock_buff); m_destination.push_back(*sock_buff);
m_addrleft--; m_addrleft--;
if (m_addrleft == 0) if (m_addrleft == 0) {
m_pstate = GET5_PORT1; m_pstate = GET_PORT;
break; m_addrleft = 2;
case GET5_PORT1: }
m_port = ((uint16_t)*sock_buff) << 8;
m_pstate = GET5_PORT2;
break;
case GET5_PORT2:
m_port |= ((uint16_t)*sock_buff);
m_pstate = DONE;
m_state = READY;
m_need_more = false;
return rv;
break; break;
default: default:
LogPrint(eLogError,"--- SOCKS5 parse state?? ", m_pstate); LogPrint(eLogError,"--- SOCKS parse state?? ", m_pstate);
Terminate(); Terminate();
return 0; return 0;
} }
if (m_pstate == DONE) {
m_state = READY;
m_need_more = false;
return (ValidateSOCKSRequest() ? rv : 0);
}
sock_buff++; sock_buff++;
len--; len--;
} }
@ -371,21 +383,18 @@ namespace proxy
if (m_state == READY) { if (m_state == READY) {
LogPrint(eLogInfo,"--- SOCKS requested ", m_destination, ":" , m_port); LogPrint(eLogInfo,"--- SOCKS requested ", m_destination, ":" , m_port);
if (pos != len) { if (pos != len) {
LogPrint(eLogError,"--- SOCKS rejected because be can't handle extra data"); LogPrint(eLogError,"--- SOCKS rejected because we can't handle extra data");
SocksRequestFailed(); SocksRequestFailed();
return ; return ;
} }
if(m_destination.find(".i2p") == std::string::npos) {
LogPrint(eLogError,"--- SOCKS invalid hostname: ", m_destination);
SocksRequestFailed();
return;
}
m_parent->GetLocalDestination ()->CreateStream ( m_parent->GetLocalDestination ()->CreateStream (
std::bind (&SOCKSHandler::HandleStreamRequestComplete, std::bind (&SOCKSHandler::HandleStreamRequestComplete,
this, std::placeholders::_1), m_destination, m_port); this, std::placeholders::_1), m_destination, m_port);
} else if (m_need_more) } else if (m_need_more) {
LogPrint (eLogDebug,"--- SOCKS Need more data");
AsyncSockRead(); AsyncSockRead();
}
} }
void SOCKSHandler::SentSocksFailed(const boost::system::error_code & ecode) void SOCKSHandler::SentSocksFailed(const boost::system::error_code & ecode)
@ -408,6 +417,7 @@ namespace proxy
m_parent->AddConnection (connection); m_parent->AddConnection (connection);
connection->I2PConnect (); connection->I2PConnect ();
} else { } else {
LogPrint (eLogDebug,"--- SOCKS Go to next state");
AsyncSockRead(); AsyncSockRead();
} }
} }

55
SOCKS.h
Unescape View File

@ -21,53 +21,26 @@ namespace proxy
private: private:
enum state { enum state {
GET_VERSION, GET_VERSION, // Get SOCKS version
SOCKS4A, SOCKS5_AUTHNEGO, //Authentication negotiation
SOCKS5_S1, //Authentication negotiation SOCKS5_AUTH, //Authentication
SOCKS5_S2, //Authentication SOCKS_REQUEST, //Request
SOCKS5_S3, //Request READY // Ready to connect
READY
}; };
enum parseState { enum parseState {
GET4A_COMMAND, GET_COMMAND,
GET4A_PORT1, GET_PORT,
GET4A_PORT2, GET_IPV4,
GET4A_IP1, GET4_IDENT,
GET4A_IP2,
GET4A_IP3,
GET4A_IP4,
GET4A_IDENT,
GET4A_HOST, GET4A_HOST,
GET5_AUTHNUM, GET5_AUTHNUM,
GET5_AUTH, GET5_AUTH,
GET5_REQUESTV, GET5_REQUESTV,
GET5_COMMAND,
GET5_GETRSV, GET5_GETRSV,
GET5_GETADDRTYPE, GET5_GETADDRTYPE,
GET5_IPV4_1, GET5_IPV6,
GET5_IPV4_2,
GET5_IPV4_3,
GET5_IPV4_4,
GET5_IPV6_1,
GET5_IPV6_2,
GET5_IPV6_3,
GET5_IPV6_4,
GET5_IPV6_5,
GET5_IPV6_6,
GET5_IPV6_7,
GET5_IPV6_8,
GET5_IPV6_9,
GET5_IPV6_10,
GET5_IPV6_11,
GET5_IPV6_12,
GET5_IPV6_13,
GET5_IPV6_14,
GET5_IPV6_15,
GET5_IPV6_16,
GET5_HOST_SIZE, GET5_HOST_SIZE,
GET5_HOST, GET5_HOST,
GET5_PORT1,
GET5_PORT2,
DONE DONE
}; };
enum authMethods { enum authMethods {
@ -110,9 +83,9 @@ namespace proxy
void GotClientRequest(boost::system::error_code & ecode, std::string & host, uint16_t port); void GotClientRequest(boost::system::error_code & ecode, std::string & host, uint16_t port);
std::size_t HandleData(uint8_t *sock_buff, std::size_t len); std::size_t HandleData(uint8_t *sock_buff, std::size_t len);
std::size_t HandleVersion(uint8_t *sock_buff); std::size_t HandleVersion(uint8_t *sock_buff);
std::size_t HandleSOCKS4A(uint8_t *sock_buff, std::size_t len); std::size_t HandleSOCKS5AuthNego(uint8_t *sock_buff, std::size_t len);
std::size_t HandleSOCKS5Step1(uint8_t *sock_buff, std::size_t len); std::size_t HandleSOCKSRequest(uint8_t *sock_buff, std::size_t len);
std::size_t HandleSOCKS5Step3(uint8_t *sock_buff, std::size_t len); bool ValidateSOCKSRequest();
void HandleSockRecv(const boost::system::error_code & ecode, std::size_t bytes_transfered); void HandleSockRecv(const boost::system::error_code & ecode, std::size_t bytes_transfered);
void Terminate(); void Terminate();
void CloseSock(); void CloseSock();
@ -136,6 +109,7 @@ namespace proxy
uint8_t m_command; uint8_t m_command;
uint16_t m_port; uint16_t m_port;
uint32_t m_ip; uint32_t m_ip;
uint8_t m_ipv6[16];
std::string m_destination; std::string m_destination;
uint8_t m_authleft; //Authentication methods left uint8_t m_authleft; //Authentication methods left
//TODO: this will probably be more elegant as enums //TODO: this will probably be more elegant as enums
@ -144,6 +118,7 @@ namespace proxy
uint8_t m_addrleft; //Octets of DNS address left uint8_t m_addrleft; //Octets of DNS address left
errTypes m_error; //Error cause errTypes m_error; //Error cause
socksVersions m_socksv; //Socks version socksVersions m_socksv; //Socks version
cmdTypes m_cmd; // Command requested
bool m_need_more; //The parser still needs to receive more data bool m_need_more; //The parser still needs to receive more data
public: public:

Write Preview
Loading…
Cancel
Save